{"id":"CVE-2013-4979","published":"2014-01-31T15:00:00Z","modified":"2024-08-06T16:59:41Z","title":"Buffer overflow in the gldll32.dll module in EPS Viewer 3.2 and earlier allows remote attackers to execute arbitrary…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Buffer overflow in the gldll32.dll module in EPS Viewer 3.2 and earlier allows remote attackers to execute arbitrary code via a crafted EPS file.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":null,"epss":{"score":0.05144,"percentile":0.92385,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2018-02-04","exploitedFirstSeen":"2018-02-04","ransomware":false,"evidence":[{"url":"https://www2.fireeye.com/rs/848-DID-242/images/rpt_APT37.pdf","date":"2018-02-04"},{"url":"https://dl.acm.org/doi/pdf/10.1145/3465481.3465758","date":"2021-08-17"}],"evidenceTotal":2,"provenance":"source"},"exploited":true,"otx":{"pulseCount":1,"pulses":[{"name":"ReaperTest","url":"https://otx.alienvault.com/pulse/630619d510e152ced9743a56","created":"2022-08-24"}],"provenance":"machine"},"cwes":[],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2013-08/0180.html","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://secunia.com/advisories/54584","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.coresecurity.com/advisories/eps-viewer-buffer-overflow-vulnerability","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[{"id":"SRC-ff264eaf7a9f69a48903","title":"The Overlooked North Korean Actor","publisher":"services.google.com","url":"https://services.google.com/fh/files/misc/apt37-reaper-the-overlooked-north-korean-actor.pdf","date":null,"mentions":[{"quote":"CVE-2013-4979","start":9073,"end":9086},{"quote":"CVE-2013-4979","start":9088,"end":9101}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2013-4823","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-4823","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2014-01-31","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2013-4979","provenance":"source"},{"date":"2018-02-04","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www2.fireeye.com/rs/848-DID-242/images/rpt_APT37.pdf","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":58.0,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 3189 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":18.48,"detail":"percentile 0.9238"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.68,"detail":"1 pulse"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}